Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/AR35BPTGyuJ-ZIyySa4nI4THqCk.roa
File: AR35BPTGyuJ-ZIyySa4nI4THqCk.roa (raw, json)
Hash identifier: dYxJP89dTbCkAzll2ljwzZF25oeilSZ3xR4k+mk6gz0=
Subject key identifier: 01:1D:F9:04:F4:C6:CA:E2:7E:64:8C:B2:49:AE:27:23:84:C7:A8:29
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398238EED689E60EA41CB9758CE8960C
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/AR35BPTGyuJ-ZIyySa4nI4THqCk.roa
Signing time: Tue 25 Aug 2026 15:20:30 +0000
ROA not before: Tue 25 Aug 2026 15:20:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44620
IP address blocks: 37.221.79.0/24 maxlen: 24
212.87.198.0/24 maxlen: 24
212.87.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:38:ee:d6:89:e6:0e:a4:1c:b9:75:8c:e8:96:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=011df904f4c6cae27e648cb249ae272384c7a829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:aa:d6:17:c3:03:0c:8c:56:9b:be:68:96:
6f:21:5b:d3:64:85:46:95:aa:22:13:26:91:2d:44:
7a:88:c3:00:8a:3c:09:b3:8c:f4:23:7b:e2:29:74:
55:5b:4c:6f:23:eb:be:b3:4e:b0:17:d0:5e:79:5e:
47:1f:ec:c0:f1:1a:2d:29:db:1b:21:30:6e:01:c6:
62:e6:4c:39:cc:bf:65:c4:2f:fa:ca:19:09:76:a6:
cd:fb:49:46:29:b8:a6:d0:e8:2b:06:f2:62:25:88:
ee:39:51:3c:df:b7:f2:9c:8d:d6:db:45:17:8c:8e:
0d:5a:11:7a:db:8c:32:75:ee:0b:82:c8:c1:26:d0:
d6:5e:7e:e6:97:6e:30:65:16:13:fb:96:71:7c:d3:
24:3e:cf:ef:ec:3d:6e:2d:b7:ac:17:e2:75:9b:cd:
33:4b:cb:a0:49:4d:5a:c1:2c:05:e2:57:ca:5f:f5:
ef:ca:e0:0f:bf:7d:93:e2:20:4c:73:59:d3:9d:4b:
b9:ee:09:91:07:72:b7:93:fe:1b:60:f3:dd:d7:4d:
a4:f2:10:63:b3:73:43:f8:92:34:00:bb:b5:b8:47:
49:65:34:92:bd:9c:bc:bc:ee:56:5f:7e:bc:22:0c:
5f:b8:49:07:e3:8b:ce:ec:64:7e:6c:25:cf:d8:7a:
a1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1D:F9:04:F4:C6:CA:E2:7E:64:8C:B2:49:AE:27:23:84:C7:A8:29
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/AR35BPTGyuJ-ZIyySa4nI4THqCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.79.0/24
212.87.198.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:3f:7c:c0:86:4e:04:24:71:e9:5c:e2:8a:bd:25:9d:28:a7:
15:2c:90:3d:f7:81:a6:a0:5c:bc:07:b3:7e:0d:d2:28:ec:56:
9a:4a:8f:ce:4e:ce:8b:e8:97:81:7a:f9:fd:b6:fa:65:6b:7a:
f7:36:00:ac:5e:0c:74:96:d5:b4:05:3f:a1:be:91:16:ad:6b:
73:7f:42:ac:cb:32:0d:bf:ba:93:7e:a1:14:4e:4c:6f:51:2f:
8d:6c:a2:33:fb:b1:32:5d:01:f7:29:89:5d:48:4c:5e:d0:37:
75:32:2c:9b:b2:78:92:79:35:35:74:3e:bf:7d:5f:e4:64:52:
1b:26:e9:88:09:8e:d8:fd:8b:5f:44:64:bc:da:26:8e:9d:53:
6a:62:65:8c:74:91:cb:1e:ca:b3:0d:41:d3:2a:94:91:64:e4:
2d:bb:2e:f1:c1:71:49:4f:7f:ac:1b:67:b2:f5:5d:ca:7f:90:
b1:49:d4:3d:f7:3c:5d:e2:40:7f:60:f8:9f:cf:80:0e:3b:61:
8e:74:91:43:49:5e:a1:43:48:d2:13:62:b0:9c:18:06:09:ad:
33:24:81:2d:b0:ea:9c:ab:d9:3d:9d:d0:78:ce:5e:a2:38:b3:
d4:06:53:8e:0b:ca:f3:07:60:b3:02:32:ec:8e:36:33:20:fc:
5b:cd:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:06 2026 by rpki-client